Overview

overview

10

Static

static

1

2024-12-28...ia.exe

windows7-x64

10

2024-12-28...ia.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-12-28_dacc0eb31ba728c28f428de3a3fb3ada_floxif_mafia

  • Size

    339KB

  • Sample

    241228-sr53dszkdj

  • MD5

    dacc0eb31ba728c28f428de3a3fb3ada

  • SHA1

    5a651d5cb6b591dbfa7bf97137f30e74ca6d596a

  • SHA256

    6366314bde0f2db59be6121d548f12c1153f480be98d0f16ead38347d9022bd4

  • SHA512

    cc931431e6dcf8b5ace93d37e9abe22445a6be05f3e55f5ea1231cbdb54f2f99f6a9512a43cbffe827db6b6378d572e7fbb6809d8af02c3f33b72799e395babb

  • SSDEEP

    6144:w3SQvqVQeKSJAs4fR4Nmk79HIpV5NTnruaXbBV+UdvrEFp7hKUMt:w3SQvqaSAss4Nmk79sV5NTXbBjvrEH7q

Score
10/10
floxifbackdoordiscoverytrojanupx

Malware Config

Targets

    • Target

      2024-12-28_dacc0eb31ba728c28f428de3a3fb3ada_floxif_mafia

    • Size

      339KB

    • MD5

      dacc0eb31ba728c28f428de3a3fb3ada

    • SHA1

      5a651d5cb6b591dbfa7bf97137f30e74ca6d596a

    • SHA256

      6366314bde0f2db59be6121d548f12c1153f480be98d0f16ead38347d9022bd4

    • SHA512

      cc931431e6dcf8b5ace93d37e9abe22445a6be05f3e55f5ea1231cbdb54f2f99f6a9512a43cbffe827db6b6378d572e7fbb6809d8af02c3f33b72799e395babb

    • SSDEEP

      6144:w3SQvqVQeKSJAs4fR4Nmk79HIpV5NTnruaXbBV+UdvrEFp7hKUMt:w3SQvqaSAss4Nmk79sV5NTXbBjvrEH7q

    Score
    10/10
    floxifbackdoordiscoverytrojanupx

    • Floxif family

      floxif

    • Floxif, Floodfix

      Floxif aka FloodFix is a file-changing trojan and backdoor written in C++.

      backdoortrojanfloxif

    • Detects Floxif payload

      backdoor

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks